On Thursday, November 30, 2006 5:01 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
Kenneth Porter wrote:
--On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
I have a few legit messages that are scoring over 5.0 due to
SARE_STOCKS and the TVD rules to catch stocks, and this is after
ALL_TRUSTED has done its work to reduce the score. These messages
of course have inline images and are being sent via Outlook
Express. Some of the scores on those rules are over 2.0. I have
started to reduce the scores, as the stock messages I get usually
have header problems and hit on Razor as well. I've seen legit
messages fire the MY_CID set of rules enough to rack up a score of
over 7.0 from those rules alone.
Can you attach a sample? Perhaps the sender can be convinced to change
the format to make the message look less spammy.
I'll find one tomorrow. The big three rules are/were
2.00 PART_CID_STOCK 2.00 PART_CID_STOCK_LESS 2.80 TVD_FW_GRAPHIC_ID1
The PART_CID rules have been removed from where ever they were located. I
have reduced the score on the TVD rule. I have 40K+ users. Talking to
individual users isn't something that I can do effectively. To make a
message look less spammy, they would have to not inline the image with OE.
[Please reply to the list.]
My point is simply that others may be seeing the same issue but not know
how to report it so that rule developers can exclude the ham. Given some
samples, it may be possible to separate the wheat from the chaff.
